General
- Target 02102026_0541_01102026_Swift_Potvrda_MT103.JS.zip
- Size 2.2MB
- Sample261002-gdgbbsaa95
- SHA256 f1282d1651335f3ff14f1997f7f6b0d8e6b38a61f203db57fa5c54264c59dd60
- MD5 1c88cd32d11738b5565025af0a6954fc
- SHA1 cc0d04f96da3eca4d23a040f4b66c0507fe266d9
- SHA512 b8ff781d4b5996b374f68792297a2f9c1f8621e45651456dee385d00a70c9d4bea0babfd327969468b4f370bad48eaea96568a74fcd006abba9644b8d1ea83fc
- SSDEEP 49152:EMdw0fHxub+agxyzkbAGn46v4pq1d3t/Ymu4ckl:E8w0fRfvJAGn4FqKmu4cG
- TLSH T189B533BCBE2B31DC583841260DCA03D167AEBE5B7A1F6055AD09BEE60F551AE35FC060
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
Swift_Potvrda_MT103.js
Resource
win10v2004-20260911-en
8 signatures
300 seconds
Behavioral task
behavioral2
Sample
Swift_Potvrda_MT103.js
Resource
win11ltsc2024-20260911-en
8 signatures
300 seconds
Malware Config
Targets
-
- Target Swift_Potvrda_MT103.JS
- Size 4.2MB
- SHA256 e455a1c91b66a2897e5afa0e8a84ef69153c22a4bd8c11036d3cf59a1fecbbe8
- MD5 56b3315f3e5830a801284c13828b3f81
- SHA1 616247f3f13c82d76a0c666d263403737b5539a8
- SHA512 a4cca5bc7f7e37b8092bf521eb379624c14fa4b74fe2d4382cc9f22f4abee7134e3653870032ed28d01e1e6d2094baae049b40625b15af8859d053b7324c7e1b
- SSDEEP 98304:DOFprzrBfLW/TyP/TcKgpqQBxJTTHtuoQhlRMbRXw41ouINT7SMPC6GxjbZjSK:DOFlfBzW+QKgB3HEoulRIRXw4INT7Sj9
- TLSH T1A32606881CAB7756F8691E6C2F5E1B891A7CD697DB30883F233454A31B4CBEB205F125
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger